Software intelligence
Important: Thegem Elements Elementor appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
6
Latest advisory
2 July 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
thegem-elements-elementor
Plugin
This catalog lists 6 known advisories affecting Thegem Elements Elementor. The most recent was published on 2 July 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
TheGem Theme Elements <= 5.11.1 - Authenticated (Contributor+) Local File Inclusion
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 2 July 2026
TheGem Theme Elements < 5.12.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
May allow attackers to run scripts in visitors' browsers or hijack admin sessions.
Published 27 April 2026
TheGem Theme Elements (for Elementor) <= 5.11.0 - Authenticated (Contributor+) Local File Inclusion
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 10 January 2026
Known Thegem Elements Elementor advisories published by month.
CVE-2026-57804 · Published 2 July 2026
Affected versions: ≤ 5.11.1
CVE-2026-42410 · Published 27 April 2026
Affected versions: < 5.12.1.1
CVE-2025-69356 · Published 10 January 2026
Affected versions: ≤ 5.11.0
CVE-2025-69357 · Published 10 January 2026
Affected versions: ≤ 5.11.0
CVE-2025-68559 · Published 12 October 2025
Affected versions: ≤ 5.10.5.1
CVE-2025-68560 · Published 12 October 2025
Affected versions: ≤ 5.10.5.1
SiteRespond Defence matches your installed Thegem Elements Elementor version against this catalog when the Defence plugin is connected to your WordPress site.